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In this work, we present a quantum key distribution scheme which exploits quantum mechanical 
violation of non-contextuality for checking the security of the protocol. In this scheme the sender 
encodes the key using path-spin intraparticle entanglement of a single particle. The receiver decodes 
the information using a combination of beam splitters and phase shifters in conjunction with Stern- 
Gerlach measuring devices. Distinctive features of this protocol as compared to the BB84 and E91 
protocols are discussed. 



PACS numbers: 

INTRODUCTION 

Quantum key distribution (QKD) protocols [T] allow 
two distant parties, traditionally called Alice and Bob, to 
produce a shared random bit string consisting of O's and 
I's known only to them, which can be used as a key to 
encrypt and decrypt messages. Based on the fundamen- 
tal principles such as no-cloning principle ^ , in quantum 
physics, QKD provides an unconditionally secure way to 
distribute random keys through insecure channels. In 
1984, the well known Bennett-Brassard (BB84) proto- 
col was first proposed [3]. The first entanglement based 
QKD protocol was proposed by Ekert in 1991 TP, where 
violation of a local realist inequality is used to check the 
security of QKD, i.e., if the shared state between Alice 
and Bob violates Bell's inequality P^, then it is pos- 
sible to generate a secure key. Subsequently, there have 
been several important theoretical improvements and ex- 
perimental demonstrations of BB84 and other QKD pro- 
tocols were discussed in [4Ul0]. In this connection, the 
violation of the Bell's inequality was first monitored in 
an experiment by Jennewein et. al.|13j. but no quantita- 
tive measure of security was derived from the observed 
violation. Later, Ling et. al. [13] have proposed an ex- 
periment on entanglement based QKD in which the vi- 
olation of BcU-CHSH inequality is used to also quantify 
the degree of security. 

In this work, we provide a quantum key distribution 
scheme in which path-spin entanglement in a single par- 
ticle (also known as intraparticle entanglement) is ex- 
ploited. In the first phase (key distribution phase), our 
protocol proceeds like the BB84 protocol with a no- 



table difference in the preparation of the state. In the 
BB84 protocol, among the four prepared states, two are 
classical states (bits), and the remaining two are quan- 
tum states (superposition of classical states or qubits). 
Our protocol, on the other hand, relies on all four pre- 
pared states which are path-spin entangled single particle 
states. The path-spin entanglement is crucial in security 
analysis, akin to the E91 protocol, as we show later. Our 
scheme, based on single particle hybrid entangled states 
thus relies on a combination elements of both the BB84 
and the E91 protocols, but with several important differ- 
ences. 

Our protocol proceeds as follows. Like the BB84 proto- 
col, we also divide the four states into two groups. Each 
group contains two orthogonal states, but each state of 
one group is non-orthogonal to the states of the other 
group. The non-orthogonality is important in the sense 
that it provides security to the protocol. This follows 
from an important feature (closely related to no-cloning 
theorem) of quantum mechanics which states that if a 
measurement allows one to gain information about the 
state of a quantum system, then, in general, the state of 
this quantum system will be disturbed, unless we know in 
advance that the possible states of the original quantum 
system are orthogonal to each other. Alice first prepares 
four path-spin entangled states and places them into two 
groups. She then randomly selects one group and chooses 
one of the states from it. Thereafter, she sends that state 
to Bob. In the next stage. Bob uses two mirrors, phase- 
shifters and beam splitters. He is free to play with one of 
the two settings by randomly adjusting the phase-shifter 
parameter to = or <^ = ^ . Then he performs measure- 
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ments on the path state vector and the spin state vector 
using a couple of Stern-Gerlach devices. The measure- 
ment on the spin state vector is performed in two differ- 
ent bases. This experiment is repeated many times and 
each time he notes down the measurement outcome of the 
path and the spin state vector. In the next step, AUce 
declares the group (but not the member of the group) she 
used in each experiment through an authenticated public 
channel. The existence of an authenticated channel be- 
tween Alice and Bob, which gives Bob an advantage over 
Eve, is essential to the security of QKD. After listening 
to Alice's announcement. Bob informs Alice which data 
should be kept and which ones should be aborted. The 
kept data generates the quantum key. This makes the 
ending of the initial phase. 

In the final phase (security checking phase) of our pro- 
tocol Bob checks whether the generated key is secure. 
The final phase goes likethe E91 protocol, but with an 
additional difference. In the E91 protocol. Bob discards 
some measurement results which are not used in quantum 
key generation, but in our protocol the aborted measure- 
ment outcomes are used in security check. In this way, 
we can use each and every experiment either in quantum 
key generation or in security checking. In the security 
checking, only the aborted cases are considered. In these 
aborted cases, Alice declares the member of the group, 
i.e., the prepared intraparticle entangled state through 
the authenticated public channel. Bob then uses this 
information to prepare a mixed state and then checks 
whether the prepared mixed state violates Bell's inequal- 
ity or not. If the prepared mixed state violates Bell's 
inequality then the quantum key is considered to be se- 
cure, otherwise not. Since this mixed state is a single 
particle entangled state, the violation of Bell's inequal- 
ity corresponds in this case to the quantum mechanical 
violation of non-contextuality. The procedure for demon- 
strating the violation of contextuality by a single-particle 
path-spin entangled state was discussed by Basu et al. 
[T5] using a Mach-Zehnder type interferometric set-up, 
and the actual experiment using single neutrons was per- 
formed by Ranch et al. [16]. Thus, the security check for 
the present protocol could be performed practically using 
this approach. 



GENERATION OF INTRAPARTICLE 
ENTANGLEMENT 

Let us consider a spin-1/2 particle (say, a neutron) that 
has an initial spin polarized state along the +z — axis 
(denoted by | tz))- Taking into consideration its path 
(or position) variables, the joint path-spin state can be 
written as 

\^o)ps = \i^o)p(S\tz)s (1) 



where the subscripts p and s refer to the path and the 
spin variables respectively. The ensemble of neutrons cor- 
responding to \ipo)ps are with Alice, incident on a beam- 
splitter (BSl) whose transmission and reflection proba- 
bilities are |ap and |/3p respectively. Any given inci- 
dent particle can then emerge along either the reflected 
or the transmitted channel corresponding to the state 
designated by \tpii) or |^t) respectively. Here we recall 
that for any given lossless beam-splitter, arguments us- 
ing the unitarity condition show that for the particles 
incident on the beam-splitter, the phase shift between 
the transmitted and the reflected states of particles is es- 
sentially ^. For simplifying our treatment, we take the 
transmission and reflection amplitudes of BSl and BS2 
to be real quantities where 4- = 1. Note that the 
beam-splitter acts only on the path-states without affect- 
ing the spin-state of the particles, while in our argument 
a crucial role is played by the mutually orthogonal path 
states \ipfi} and |V't) which are eigenstates of the pro- 
jection operators PItPr) and P{iPt) respectively. These 
projection operators can be regarded as corresponding 
to the observables that pertain to the determination of 
which channel a particle is found to be in. For exam- 
ple, the results of such a measurement for the reflected 
(transmitted) channel with binary alternatives are given 
by the eigenvalues of P{'tl:ji){P[t]jT))] the eigen- value 
+1(0) corresponds to a neutron being found (not found) 
in the channel represented by \'tp b) [P {i^T)) ■ The state of 
a particle emergent from BSl can then be written as 

|V'o)ps ^ \iJi)ps = {a\i}T)p + «/3|V'fl)p) ® I \z)s (2) 

The state vectors \i1^t)pi I \z)s, and | ]^z)s can be 

represented as 

IV't)^ = ( 1 ) ' l^«)p ^ ( ) 

lt.).^|0).^ (^5),U.>.^|1).^ (^J) (3) 

Next, let us suppose that the particles in the channel 
corresponding to \'iPt)p pass through a spin-flipper (SF) 
(that contains a uniform magnetic field along, say, the 
X — axis) which flips the state | tz)s to | iz)s- As a 
consequence of this insertion of a spin-flipper in one of 
the channels, the particle 1 with Alice has now the path- 
spin entangled state given by 

\'^)ps = a\ \z)s ® \^t)p + ifi\ iz)s «) \i'R)p 

= a\Q)s®\il)T)p + ili\l)s®\i^R)p (4) 



QUANTUM KEY DISTRIBUTION SCHEME 
AND ITS SECURITY 

In this section, we discuss our quantum key distribu- 
tion scheme. Our protocol goes as follows. 
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A. Intraparticle entanglement prepared by Alice 

Let us consider the four intraparticle entangled states 
1*), 1*^), 1$), 1$^), where 



I*) = ^(|0>« ^ \^t)p + i\l)s <E> |V'if)p) 



1^(10) 



n/2 ^/2 



— ® |V't)p-« — 



ID 



V2 



The former two intraparticle entangled states \'^) and 
are prepared in a way described in the previous sec- 
tion while the latter two entangled states |$) and |<i>_L) 
are generated when the Hadamard gate is applied on the 
spin state of l^") and We should note that the 

states l^*) and are not orthogonal to |<i>) and 
Alice prepares any one of the above four intrapaticle en- 
tangled states randomly and then sends that state to 
Bob. This event is repeated many times. 




FIG. 1: A spin-1/2 particle falls on the beam-splitter BSl. A 
spin-flipper is placed along the transmitted channel, and a phase- 
shifters applied in the reflected path. Bob uses anothet phase- 
shifter (PS2) and then recombines the reflected and the transmitted 
channels. Finally, Bob performs path and spin measurements using 
the Stern-Gerlach devices SGI and SG2. 

B. Path and Spin measurement by Bob 

Bob places the mirrors Ml and M2 along the path \iPt) 
and \ipFi} and in addition to this, a phase-shifter (PS2) is 
also kept along the path | ■)/'«) that changes the phase of 
the particle by </>. Subsequently Bob uses a 50:50 beam 
splitter (BS2), to recombine the beams corresponding to 
\iPt) and IV-'i?)- The output path states after interacting 



with beam splitter are given by 
1 

1 

71 



(|V'T)+ie^1V'i?» 



(6) 



If Alice sends the states |*), 1$) or \^±), then after 

emerging from beam splitter (BS2), the possible resulting 
states at Bob's site are given by 



m 

where \xi) — 
»e'10),), 1x3) 
S(i^|0).H 



1 

71 
1 

'71 
1 

71 
1 

'71 



(ili'T) ® IXi) + \^'r) ® 1X2)) 

H^'t) \X2) - ^H'r) \xi)) 

(ili'T) ® \X3) + \^'r) ® \Xi)) 
(A^t) ® 1X4) + Wr) ® 1X3)) (7) 
1). - ^e^m.), 1X2) = ^(|1). + 

1).), 1X4) - 



V2 



V2 I V2 

Let us consider that Bob randomly uses two settings of 
his apparatus by choosing the value of the phase shifter 
parameter cf), say, (p = and cp — ^. If Bob chooses (/> — 
then eq.Q reduces to 

l*^°^) = ^(*IV'^)®lxl''^) + IV'k)®lx^°^)) 



^{Wt)®\x^2^)-W^\x?^)) 

^(^IV'^)®lxf) + l^i^)®lxf)) 

^(*|V'T)^lxf) + l^k)^lxf)) (8) 

where IxD = ^(|1). - *|0).), |x^°') = ^(|1). + ^|0).), 
lxi°^) = |0)., Ixf ) = |i).. 

If Bob chooses the setting <f> — then he further performs 
a Hadamard gate transformation on the spin qubit and 
thereafter eq.Q reduces to 

S(*IV^T)®lxi^VlV^^)®IX2^^)) 



) = 

.(0)\ 



l$(f)\ 



1$ 



(f)\ 



^(IV'^)®lx^'V*l^k)®lxP^)) 

^(*IV'^)®lxi'VlV'k)®IX3'^)) (9) 



where |xj^') = |0)„ \^>) = |1)., Ix's") - ^(|0) 
*|1).), lxi^^)-;^(|0). + z|l).). 



.(f) 



(f)\ 
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Using his Stcrn-Gcrlach devices Bob makes path mea- 
surement in the basis {|V't)> iV'k)}- The path state vec- 
tors are |V't) and |'^^) with path observable given by 

= I^t)(V'tI - IV'K)(^kl 

The path observable &^ varies according to the magni- 
tude of the phase shift (p. It has two eigenvalues ±1. The 
eigenvalue and —1 correspond to the measurement of 
path state vectors \4>'t) and |'^^) respectively. The spin 
measurement is performed either in the basis {|0)s, |l)s} 
or in the basis - i\0)s), :^{\^) s + s)} , which 

are the eigenstates of the observables ay and ct^ respec- 
tively, with eigenvalues ±1. 



C. Quantum key distribution scheme 

Step-I: Alice prepares the intraparticlc entangled states 
and then divides them into two groups and G^, where 

G^ = {|$),|$^} (11) 

She then randomly picks up one of the states either from 
or from G^ and sends that to Bob. 

Step-II: Bob randomly changes his settings by choosing 
the value of the phase shifter either (/) = or ^ = | 
irrespective of the state sent by Alice. Bob applies a 
Hadamard gate transformation on the spin component if 
he chooses ^ = ^ setting and does nothing if the (f) = 
setting is used. 

Step-III: Bob measures the path state vector in the ba- 
sis IV'fl)} and also perform measurement on spin 
component either in the basis {|0)s, or in the basis 
{^(|l),-z|0),), ^(|l), + z|0),)}. Bob then noted down 
the path and spin measurement outcome. 

Step-IV: The experiment described in the above three 
steps is repeated many times. Alice then publicly de- 
clares the group (not the member of the group) from 
which she chooses the state randomly. After listening to 
Alice's group declaration, Bob informs Alice which ex- 
perimental data should be kept and which ones should 
be aborted. The data which are kept are used in gen- 
erating the secret key, and the data which are aborted 
are used in the security check, as described in the table 
below: 



State send 
by Alice 


Bob's 


Path 
measurement 


spin 
measurement 
outcome 


Decision 


*> 


</> = 
* = f 


*T> (I^'r)') 

H-'t) (IV-'r)) 


^(|l>s - <|0>s) (^(Il>s +i|0>s)) 

0>s (|l>s) 
^(|l>s - i|0>s) ( Jj(|l)s +i|0)s)) 

|0>s (|1><,) 


KEEP 

ABORT 
ABORT 
KEEP 




* = f 


H-'t) (I'I-'r)) 
(l'/-k>) 

H-'t) (I'I-'r)) 


^(|i>s + ms) (;75(li>s - *|0>s)) 

\0)a (|l>s) 
^(|l>s - i|0>s) (-L(ll>s +ilO)s)) 

l>s (10)^,) 


KEEP 
ABORT 

ABORT 
KEEP 


I*) 


</> = 

* = f 


H-'t) (I'I-'r)) 
li'T) U'I-'r)) 


^(11>» - i|0>s) ( JjCins +i|0>s)) 

\0)a (|l>s) 
^(|1>3 - ilO)s) (;75(|l>s +i|0>s)) 

|0>s (|l>s) 


ABORT 
KEEP 
KEEP 

ABORT 




= 

* = f 


H't) (I'I-'r)) 

li-T) (I^'r)) 
l*T> (l*R>) 


^(|l>s - i|0>s) ^(Il>s +i|0>s) 
!><, (|0>s) 

^(|i>s +*|0>s) ;75(|i>s -me) 

\0)s (|1>3) 


ABORT 
KEEP 
KEEP 

ABORT 



D. Security check 



Let us consider the data which are not used in the key 
generation. For example, let us suppose that the experi- 
ments are performed 1000 times. Further, consider that 
500 times they (Alice and Bob) succeded in generating 
the key and the remaining 500 times they did not. Now, 
consider those remaining 500 cases for which Bob con- 
veys the word "ABORT" to Alice. In these cases Alice 
announces the member of the group (i.e. input state that 
she sent to Bob) through an authenticated channel. If we 
consider the situation where Alice announces the state 
I*) 200 times and the states |^>) and 100 

times each, then the probability of occurence of the state 
l^*) is I and the probability of occurence of the states 
|\E'_l),|$) and are | each. With this information. 

Bob prepares the mixed state 

p = ^|M/)(*| + ^(|*^)(*^| + |$>($| + |<1>^)($^|),(12) 

If the prepared mixed state violates Bell's inequality, then 
the generated key considered to be secure, otherwise the 
key is not secure. In the above example, one can check 
that the state described by the density operator satisfies 
Bell's inequality. Hence the key is not secure. 

We now generalize the above described situation and 
consider all the aborted cases where the states \^), 
1$) and occur with probability pi, p2, Ps and p4 

respectively. We should note that in the case of aborted 
experiments. Bob determines the value of Pi, P2, Pz and 
P4 only when Alice declares the sent state. With the 
value of pi, P2, Pz and P4, Bob prepares the mixed state 

=Pl|«')(*| +P2|*±)(*_l| +P3|*)(*| +P4|*i)(*_L|, 
Pi +P2 +P3 +P4 = 1 (13) 
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For the security of our generated key, we have to check 
whether the state described by the density operator 
violates Bell's inequality or not. We use Horodecki's 
[T7] criteria to show the Bell's inequality violation, which 
states that Bell's inequality is violated iff M{p) > 1, 



Mip) = X + p 



(14) 



where A and /i are the two largest eigenvalues of the sym- 
metric matrix T^T, where T denotes the correlation ma- 
trix. The correlation matrix corresponding to the state 
described by the density operator is given by 



Pi ~P2 -{P3 -Pi) 
T = I Pi-P2 P3-P4 

P3+P4 -{P1+P2) 

The symmetric matrix T^T is given by 



(15) 



til ti2 tl3 
tl2 ^22 ^23 
^13 ^23 ^33 



(16) 



where tn = {pi -^2)^ + {P3 +Pi)'^, ti2 = -(pi -P2)(P3 - 

P4), ti3 = -(pi+P2)(P3+P4), t22 = (Pl-P2)^ + (P3-?>4)^, 
^23 = {Pl ~P2){P3 -Pa), ^33 = {Pl +P2f + {p3 - PiY ■ 

Now let us consider a particular case where pi = p, p2 — 
Ps = Pi ^ ■ In this case, the two largest eigenvalues 
are given by 



16p2 - 8p + 1 



9 

-30p2 



44p3 + 2 



4p2 -2p+l 



(17) 



Thus the quantity M(p) is given by 



M {p) = X + /i 



28p2 -Up + 4 
9 



2^20p4 



30p2 - 44p3 -I- 2 
9 



-(18) 



It can be easily shown that the violation occurs only for 
p > 0.67. Therefore, we can conclude that if p > 0.67 
then the quantum key distribution scheme is successful, 
otherwise not. 

It might be interesting to estimate the percentage of 
the data used in the key generation process corresponding 
to any given value of p for the mixed state. Consider the 
four states be divided into two basis sets Bi and B2, 
where Bi = {j^-), j^-j^}, and B2 = Our 
protocol fails to generate a secure key in the cases: (i) if 
Alice chooses one of the states from Bi to send it to Bob, 
and if Bob uses the phase shifter parameter (j> — 0; or (ii) 
if Alice chooses one of the states from B2 to send it to 
Bob and if Bob uses the phase shifter parameter (f) — ^. 



Let 771 and ri2 be the probabilities of failure for first and 
second case respectively. 

VI = = 0/\^)).P{\^)) + P{(t> = 0/\^j_)).P{\^j_)) 

1 1 



2-P1+2-P2 



(19) 



m = p{4> = "^/m.Pim + p{<t> = ^/i$^)).p(i$^)) 



1 



(20) 

Now choosing Pi = p and P2 = Ps ^ Pi ~ , we have 
239+1 



Vi = 



V2 



6 

1-p 



(21) 



(22) 



For different values of p > 0.67, the values of rji and 
r]2 are listed in the table given below: 



SI. No. 


P 


M{p) 


Vi 


m 


1. 


0.67 


1.01 


0.39 


0.11 


2. 


0.70 


1.08 


0.40 


0.10 


3. 


0.75 


1.20 


0.41 


0.08 


4. 


0.80 


1.34 


0.43 


0.06 


5. 


0.85 


1.49 


0.45 


0.05 


6. 


0.90 


1.64 


0.46 


0.03 


7. 


0.95 


1.81 


0.48 


0.01 


8. 


1.0 


2.0 


0.50 


0.00 



CONCLUSIONS 

In this work we have formulated a quantum key distri- 
bution scheme using intraparticle entangled states. Our 
protocol proceeds in phases like the BB84 and the E91 
protocols, but with notable differences. Our protocol is 
based on single particle states with two entangled de- 
grees of freedom. The entanglement is crucial for secu- 
rity analysis, which is based on the quantum violation 
of noncontextuality for single particle mixed entangled 
states. Further, no data is wasted since the data which 
is not used in quantum key generation can be used in se- 
curity checking. Thus, we can use each and every exper- 
iment either in a quantum key generation or in security 
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checking. Our protocol provides an example of a prac- 
tical use of quantum contextuality. Moreover, it shoulc 
be possible to experimentally realize our scheme, with 
exisitng set-ups such as the one on neutron interferome- 
try [IB]. We conclude by noting that though the scheme 
presented here is based on the path-spin entanglement 
of spin-1/2 particles, it can be easily extended for other 
single particle entangled states, such as using the path 
and polarization variables of photons, for instance. 
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